Accomplish detailed the engineering behind its coding-agent sandbox, which runs an Ubuntu guest OS inside a full virtual machine on macOS so that the agent harness, downloaded code, guest user and gue…
A research team found a disk isolation bug in Cloudflare Containers that let a sandbox read other customers' files, including directory listings, SQLite databases, Chromium profiles, .env files, and c…
Security researchers found two sandbox-escape vulnerabilities in OpenAI's Codex and reported both to OpenAI on August 12, 2026, with both fixed within eight days. The first, dubbed Overpatch, let the …
A security researcher found that an attacker-controlled workspace containing a .git/ directory can escape the Cursor CLI's macOS Seatbelt sandbox and run code on a Mac with the logged-in user's full a…
Anthropic fixed a Claude Code sandbox escape in version 2.1.247 after researchers at Accomplish showed that an untrusted repository could run commands on a Mac outside the macOS Seatbelt sandbox with …
Anthropic's Claude Cowork desktop app contained a sandbox escape vulnerability that allowed untrusted content inside a Linux VM to read and write files anywhere on the host Mac, including SSH keys and…